{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apache log4j ist ein Framework zum Loggen von Anwendungsmeldungen in Java.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache log4j ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Appliance\n- Juniper Appliance\n- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0520 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0520.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0520 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0520"
      },
      {
        "category": "external",
        "summary": "NVD NIST vom 2021-12-15",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4104"
      },
      {
        "category": "external",
        "summary": "IBM Security Advisory vom 2021-12-15",
        "url": "https://www.ibm.com/support/pages/node/6526432"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5148 vom 2021-12-15",
        "url": "https://access.redhat.com/errata/RHSA-2021:5148"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4096-1 vom 2021-12-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009911.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4097-1 vom 2021-12-15",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009912.html"
      },
      {
        "category": "external",
        "summary": "Atlassian Security Advisory - Log4j",
        "url": "https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5186 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5186"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527226 vom 2021-12-17",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-on-openshift-and-ibm-db2-and-db2-warehouse-on-cloud-pak-for-data-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5183 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5183"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5184 vom 2021-12-17",
        "url": "https://access.redhat.com/errata/RHSA-2021:5184"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5141 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5141"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5107 vom 2021-12-16",
        "url": "https://access.redhat.com/errata/RHSA-2021:5107"
      },
      {
        "category": "external",
        "summary": "Log4j Vulnerabilities Impact On Oracle E-Business Suite Analysis",
        "url": "https://www.integrigy.com/security-resources/log4j-vulnerabilities-impact-oracle-e-business-suite-analysis"
      },
      {
        "category": "external",
        "summary": "Atos Security Advisory Report - OBSO-2112-01",
        "url": "https://networks.unify.com/security/advisories/OBSO-2112-01.pdf"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0095587 vom 2021-12-17",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0095587"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527952 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4shell-vulnerability-affects-ibm-spss-statistics-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4112-1 vom 2021-12-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009916.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6527834 vom 2021-12-18",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-cve-2021-4104-affects-infosphere-data-replication/"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4115-1 vom 2021-12-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009918.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4111-1 vom 2021-12-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009917.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:14866-1 vom 2021-12-17",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009915.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5206 vom 2021-12-20",
        "url": "https://access.redhat.com/errata/RHSA-2021:5206"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-5206 vom 2021-12-21",
        "url": "https://linux.oracle.com/errata/ELSA-2021-5206.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6528678 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-db2-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6529056 vom 2021-12-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-apache-log4j-affect-ibm-app-connect-enterprise-v11-v12-and-ibm-integration-bus-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:5206 vom 2021-12-21",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-December/060975.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4160-1 vom 2021-12-22",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009934.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6536868 vom 2021-12-23",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-have-been-identified-in-apache-log4j-shipped-with-ibm-tivoli-netcool-omnibus-common-integration-libraries-cve-2021-4104-cve-2021-45046-cve-2021-44228/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:5269 vom 2021-12-23",
        "url": "https://access.redhat.com/errata/RHSA-2021:5269"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:4190-1 vom 2021-12-24",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-December/009943.html"
      },
      {
        "category": "external",
        "summary": "EMC Security Advisory DSA-2021-274 vom 2022-01-09",
        "url": "https://www.dell.com/support/kbdoc/de-de/000194503/dsa-2021-274-dell-emc-data-domain-security-update-for-apache-log4j-remote-code-execution-vulnerability-cve-2021-44228"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin HPESBGN04215 rev.10 vom 2022-01-08",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbgn04215en_us"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6539408 vom 2022-01-11",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-apache-log4j-affect-the-ibm-websphere-application-server-and-ibm-security-guardium-key-lifecycle-manager-cve-2021-4104-cve-2021-45046-cve-2021-45105/"
      },
      {
        "category": "external",
        "summary": "Juniper Security Bulletin JSA11287 vom 2022-01-12",
        "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11287\u0026cat=SIRT_1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5223-1 vom 2022-01-13",
        "url": "https://ubuntu.com/security/notices/USN-5223-1"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6540892 vom 2022-01-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-some-features-of-ibm-spss-analytic-server-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "Unify Security Advisory Report OBSO-2201-01 vom 2022-01-18",
        "url": "https://networks.unify.com/security/advisories/OBSO-2201-01.pdf"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1562 vom 2022-01-20",
        "url": "https://alas.aws.amazon.com/ALAS-2022-1562.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0126-1 vom 2022-01-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-January/010026.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0133-1 vom 2022-01-20",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-January/010032.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6550448 vom 2022-01-25",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-data-studio-client-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0291 vom 2022-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2022:0291"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0289 vom 2022-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2022:0289"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0294 vom 2022-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2022:0294"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9056 vom 2022-01-26",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9056.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0290 vom 2022-01-26",
        "url": "https://access.redhat.com/errata/RHSA-2022:0290"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0290 vom 2022-01-27",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0290.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2022-1739 vom 2022-01-27",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2022-1739.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6551880 vom 2022-01-29",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-ibm-spectrum-scale-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2905 vom 2022-01-31",
        "url": "https://lists.debian.org/debian-lts-announce/2022/01/msg00033.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0436 vom 2022-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2022:0436"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6553622 vom 2022-02-04",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-informix-dynamic-server-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-44228-3/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6553626 vom 2022-02-04",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-log4j-vulnerability-cve-2021-44228-in-ibm-informix-dynamic-server-in-cloud-pak-for-data-2/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0438 vom 2022-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2022:0438"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0430 vom 2022-02-03",
        "url": "https://access.redhat.com/errata/RHSA-2022:0430"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0435 vom 2022-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2022:0435"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0437 vom 2022-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2022:0437"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0450 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0450"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0445 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0445"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0448 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0448"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0449 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0449"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0446 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0446"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0447 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0447"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0444 vom 2022-02-08",
        "url": "https://access.redhat.com/errata/RHSA-2022:0444"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0475 vom 2022-02-09",
        "url": "https://access.redhat.com/errata/RHSA-2022:0475"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0497 vom 2022-02-09",
        "url": "https://access.redhat.com/errata/RHSA-2022:0497"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0354-1 vom 2022-02-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010195.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2022:0355-1 vom 2022-02-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2022-February/010196.html"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097471 vom 2022-05-18",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097471"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0507 vom 2022-02-10",
        "url": "https://access.redhat.com/errata/RHSA-2022:0507"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0527 vom 2022-02-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:0527"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0524 vom 2022-02-14",
        "url": "https://access.redhat.com/errata/RHSA-2022:0524"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0553 vom 2022-02-15",
        "url": "https://access.redhat.com/errata/RHSA-2022:0553"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0661 vom 2022-02-23",
        "url": "https://access.redhat.com/errata/RHSA-2022:0661"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9419 vom 2022-05-23",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9419.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6563561 vom 2022-03-16",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-vulnerable-to-arbitrary-code-execution-due-to-apache-log4j-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6565387 vom 2022-03-23",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-vulnerability-in-apache-log4j-affects-websphere-service-registry-and-repository-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097470 vom 2022-03-25",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097470"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0096807 vom 2022-03-29",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0096807"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin",
        "url": "https://www.ibm.com/support/pages/node/6569189"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1296 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1296"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1297 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1297"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1299 vom 2022-04-11",
        "url": "https://access.redhat.com/errata/RHSA-2022:1299"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097639 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097639"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097650 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097650"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-022 vom 2022-04-25",
        "url": "https://downloads.avaya.com/css/P8/documents/101081577"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097787 vom 2022-04-28",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097787"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6575541 vom 2022-04-28",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-may-be-affected-by-vulnerabilities-in-apache-log4j-1-x-version/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5460 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5460"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5458 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5458"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:5459 vom 2022-07-01",
        "url": "https://access.redhat.com/errata/RHSA-2022:5459"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099671 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099671"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099128 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099128"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099131 vom 2022-07-24",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099131"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099667 vom 2022-08-13",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099667"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0099669 vom 2022-08-13",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0099669"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0100505 vom 2022-09-21",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0100505"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6829357 vom 2022-10-15",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-infosphere-information-server-may-be-affected-by-vulnerabilities-in-apache-log4j-1-x-version-2/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6831267 vom 2022-10-22",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-identity-manager-is-affected-by-log4j-vulnerability-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6832160 vom 2022-10-27",
        "url": "https://www.ibm.com/blogs/psirt/security-bulletin-due-to-use-of-apache-log4j-ibm-qradar-siem-is-vulnerable-to-arbitrary-code-execution-cve-2019-17571-cve-2021-44832-cve-2021-4104/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7009621 vom 2023-07-25",
        "url": "https://www.ibm.com/support/pages/node/7014395"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202312-04 vom 2023-12-22",
        "url": "https://www.cybersecurity-help.cz/vdb/SB2023122213"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202312-04 vom 2023-12-22",
        "url": "https://security.gentoo.org/glsa/202312-04"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin vom 2023-10-27",
        "url": "https://www.ibm.com/support/pages/node/7060803"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7152257 vom 2024-05-15",
        "url": "https://www.ibm.com/support/pages/node/7152257"
      }
    ],
    "source_lang": "en-US",
    "title": "Apache log4j: Schwachstelle erm\u00f6glicht Ausf\u00fchren von beliebigem Programmcode",
    "tracking": {
      "current_release_date": "2024-05-14T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:29:46.074+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-0520",
      "initial_release_date": "2021-12-15T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-12-15T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-12-16T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Atlassian, Red Hat, Unify und IBM aufgenommen"
        },
        {
          "date": "2021-12-19T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von HCL, IBM und SUSE aufgenommen"
        },
        {
          "date": "2021-12-20T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2021-12-21T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM und CentOS aufgenommen"
        },
        {
          "date": "2021-12-22T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE, IBM und Red Hat aufgenommen"
        },
        {
          "date": "2021-12-26T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-01-09T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von EMC und HP aufgenommen"
        },
        {
          "date": "2022-01-10T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-12T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Juniper aufgenommen"
        },
        {
          "date": "2022-01-13T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2022-01-16T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-18T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Unify aufgenommen"
        },
        {
          "date": "2022-01-19T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Amazon und SUSE aufgenommen"
        },
        {
          "date": "2022-01-20T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2022-01-24T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-26T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2022-01-27T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Oracle Linux und Amazon aufgenommen"
        },
        {
          "date": "2022-01-30T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-01-31T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2022-02-03T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Red Hat und IBM aufgenommen"
        },
        {
          "date": "2022-02-07T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-02-08T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-02-09T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat und SUSE aufgenommen"
        },
        {
          "date": "2022-02-10T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-02-14T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-02-15T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-02-23T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-03-15T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-03-22T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-03-24T23:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-03-29T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-04-04T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-04-11T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-04-24T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-04-26T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-04-27T22:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von HCL und IBM aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-05-23T22:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-06-30T22:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-07-24T22:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-08-14T22:00:00.000+00:00",
          "number": "42",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-09-20T22:00:00.000+00:00",
          "number": "43",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-10-16T22:00:00.000+00:00",
          "number": "44",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-10-23T22:00:00.000+00:00",
          "number": "45",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2022-10-26T22:00:00.000+00:00",
          "number": "46",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-07-24T22:00:00.000+00:00",
          "number": "47",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-10-29T23:00:00.000+00:00",
          "number": "48",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2023-12-21T23:00:00.000+00:00",
          "number": "49",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2024-05-14T22:00:00.000+00:00",
          "number": "50",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "50"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.2",
                "product": {
                  "name": "Apache log4j 1.2",
                  "product_id": "T021343",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:apache:log4j:1.2"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c2",
                "product": {
                  "name": "Apache log4j \u003c2",
                  "product_id": "T021344"
                }
              }
            ],
            "category": "product_name",
            "name": "log4j"
          }
        ],
        "category": "vendor",
        "name": "Apache"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Atlassian Bitbucket",
            "product": {
              "name": "Atlassian Bitbucket",
              "product_id": "T021356",
              "product_identification_helper": {
                "cpe": "cpe:/a:atlassian:bitbucket:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Atlassian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Communication Manager",
            "product": {
              "name": "Avaya Aura Communication Manager",
              "product_id": "T015126",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:communication_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Web License Manager",
            "product": {
              "name": "Avaya Web License Manager",
              "product_id": "T016243",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:web_license_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya one-X",
            "product": {
              "name": "Avaya one-X",
              "product_id": "1024",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:one-x:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "EMC Data Domain",
            "product": {
              "name": "EMC Data Domain",
              "product_id": "T021496",
              "product_identification_helper": {
                "cpe": "cpe:/o:emc:data_domain:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "EMC Data Domain OS",
            "product": {
              "name": "EMC Data Domain OS",
              "product_id": "T006099",
              "product_identification_helper": {
                "cpe": "cpe:/o:emc:data_domain_os:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "EMC"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HCL Commerce",
            "product": {
              "name": "HCL Commerce",
              "product_id": "T019293",
              "product_identification_helper": {
                "cpe": "cpe:/a:hcltechsw:commerce:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HCL"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM DB2",
            "product": {
              "name": "IBM DB2",
              "product_id": "5104",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:db2:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Data Studio",
            "product": {
              "name": "IBM Data Studio",
              "product_id": "T021807",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:data_studio:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM InfoSphere Data Replication",
            "product": {
              "name": "IBM InfoSphere Data Replication",
              "product_id": "T021399",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:infosphere_data_replication:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "11.7",
                "product": {
                  "name": "IBM InfoSphere Information Server 11.7",
                  "product_id": "444803",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:infosphere_information_server:11.7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "InfoSphere Information Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Dynamic Server",
                "product": {
                  "name": "IBM Informix Dynamic Server",
                  "product_id": "T021953",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:informix:::dynamic_server"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Informix"
          },
          {
            "category": "product_name",
            "name": "IBM Integration Bus",
            "product": {
              "name": "IBM Integration Bus",
              "product_id": "T011169",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:integration_bus:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.6.1.2",
                "product": {
                  "name": "IBM Maximo Asset Management 7.6.1.2",
                  "product_id": "812526",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:maximo_asset_management:7.6.1.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Maximo Asset Management"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "IBM QRadar SIEM 7.5",
                  "product_id": "T022954",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0",
                  "product_id": "T023574",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.4",
                "product": {
                  "name": "IBM QRadar SIEM 7.4",
                  "product_id": "T024775",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "category": "product_name",
            "name": "IBM SPSS",
            "product": {
              "name": "IBM SPSS",
              "product_id": "T013570",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spss:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Access Manager for Enterprise Single Sign-On",
            "product": {
              "name": "IBM Security Access Manager for Enterprise Single Sign-On",
              "product_id": "T006523",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_access_manager_for_enterprise_single_sign_on:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Security Guardium",
            "product": {
              "name": "IBM Security Guardium",
              "product_id": "T021345",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:security_guardium:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "6.0.2",
                "product": {
                  "name": "IBM Security Identity Manager 6.0.2",
                  "product_id": "976243",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_identity_manager:6.0.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Identity Manager"
          },
          {
            "category": "product_name",
            "name": "IBM Spectrum Scale",
            "product": {
              "name": "IBM Spectrum Scale",
              "product_id": "T019402",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:spectrum_scale:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM Tivoli Netcool/OMNIbus",
            "product": {
              "name": "IBM Tivoli Netcool/OMNIbus",
              "product_id": "T004181",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:tivoli_netcool%2fomnibus:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "8.5.x",
                "product": {
                  "name": "IBM WebSphere Service Registry and Repository 8.5.x",
                  "product_id": "T022377",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:websphere_service_registry_and_repository:8.5.x"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "WebSphere Service Registry and Repository"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Juniper Junos Space",
            "product": {
              "name": "Juniper Junos Space",
              "product_id": "T003343",
              "product_identification_helper": {
                "cpe": "cpe:/a:juniper:junos_space:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Juniper"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle E-Business Suite",
            "product": {
              "name": "Oracle E-Business Suite",
              "product_id": "8311",
              "product_identification_helper": {
                "cpe": "cpe:/a:oracle:e-business_suite:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Red Hat Enterprise Linux 8",
                  "product_id": "T014111",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "4",
                "product": {
                  "name": "Red Hat OpenShift 4",
                  "product_id": "T018720",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:4"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.8",
                "product": {
                  "name": "Red Hat OpenShift 4.8",
                  "product_id": "T020020",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform_4.8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Unify OpenScape 4000",
            "product": {
              "name": "Unify OpenScape 4000",
              "product_id": "T018011",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_4000:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Branch",
            "product": {
              "name": "Unify OpenScape Branch",
              "product_id": "T018258",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_branch:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Contact Center",
            "product": {
              "name": "Unify OpenScape Contact Center",
              "product_id": "T008876",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_contact_center:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Deployment Service (DLS)",
            "product": {
              "name": "Unify OpenScape Deployment Service (DLS)",
              "product_id": "T015711",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_deployment_service:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Mediaserver",
            "product": {
              "name": "Unify OpenScape Mediaserver",
              "product_id": "T018253",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_mediaserver:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape UC Application",
            "product": {
              "name": "Unify OpenScape UC Application",
              "product_id": "T015712",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_uc_application:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Voice",
            "product": {
              "name": "Unify OpenScape Voice",
              "product_id": "T008873",
              "product_identification_helper": {
                "cpe": "cpe:/a:unify:openscape_voice:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Unify OpenScape Xpert",
            "product": {
              "name": "Unify OpenScape Xpert",
              "product_id": "T018014",
              "product_identification_helper": {
                "cpe": "cpe:/h:unify:openscape_xpert:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Unify"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-4104",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Apache log4j aufgrund einer Deserialisierung von nicht vertrauensw\u00fcrdigen Daten, wenn der Angreifer Schreibzugriff auf die Log4j-Konfiguration hat und wenn die eingesetzte Anwendung f\u00fcr die Verwendung von JMSAppender konfiguriert ist. Ein entfernter authentisierter Angreifer mit bestimmten Rechten kann diese Schwachstelle ausnutzen, um beliebigen Code auf dem System auszuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T008876",
          "T008873",
          "T003343",
          "T011169",
          "T015127",
          "T019293",
          "T015126",
          "T004914",
          "T014111",
          "T021807",
          "T018720",
          "812526",
          "398363",
          "T021496",
          "T006099",
          "T015519",
          "T015518",
          "T006523",
          "T015516",
          "T015712",
          "T015711",
          "T012167",
          "T018011",
          "T018253",
          "T013570",
          "T016243",
          "T018014",
          "T022954",
          "T018258",
          "T021345",
          "2951",
          "T002207",
          "1024",
          "444803",
          "5104",
          "T004181",
          "T024775",
          "T021343",
          "976243",
          "8311",
          "T021356",
          "T021399",
          "T021953",
          "T023574",
          "T020020",
          "T019402",
          "T000126",
          "T022377",
          "1727"
        ]
      },
      "release_date": "2021-12-15T23:00:00.000+00:00",
      "title": "CVE-2021-4104"
    }
  ]
}